PT-2025-4459 · Tobias Spiess · Ts Comfort Db

Name of the Vulnerable Software and Affected Versions: Tobias Spiess TS Comfort DB versions prior to 2.0.8 Description: The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This enables attackers to inject malicious...

WordPress plugin Aklamator INfeed 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress PropertyHive plugin < 2.1.1 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin PropertyHive versions 2.1.1...

CVE-2024-12585

CVE-2024-12585 affects the Property Hive WordPress plugin (vulnerable through 2.1.1). The issue is a Reflected XSS: a parameter is output back to the page without proper sanitisation/escaping, enabling an attacker to craft input that could affect high-privilege users (e.g., admins). The Red Hat a...

CVE-2024-12585 PropertyHive < 2.1.1 - Reflected XSS

The Property Hive WordPress plugin before 2.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-22338

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lichwang WP-tagMaker tagmaker allows Reflected XSS.This issue affects WP-tagMaker: from n/a through = 0.2.2...

CVE-2025-22335

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rajib.dewan Opencart Product in WP opencart-product-in-wp allows Reflected XSS.This issue affects Opencart Product in WP: from n/a through = 1.0.1...

CVE-2025-22294

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in theme funda Custom Field For WP Job Manager custom-field-for-wp-job-manager allows Reflected XSS.This issue affects Custom Field For WP Job Manager: from n/a through = 1.3...

CVE-2024-56056

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kmfoysal06 SimpleCharm simplecharm allows Reflected XSS.This issue affects SimpleCharm: from n/a through = 1.4.3...

CVE-2025-22294

CVE-2025-22294 affects the WordPress plugin Custom Field For WP Job Manager (Gravity Master) versions n/a through 1.3. The issue is a Reflected Cross-Site Scripting vulnerability caused by improper neutralization of input during web page generation. The CVSS v3.1 base score is 7.1 (HIGH) with net...

CVE-2025-22335

CVE-2025-22335 is a reflected XSS affecting the Opencart Product in WP plugin. Public details show the issue applies to Opencart Product in WP versions up to 1.0.1 and is caused by improper input neutralization during web page generation. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) ...

CVE-2025-22335 WordPress Opencart Product in WP plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rajib.dewan Opencart Product in WP opencart-product-in-wp allows Reflected XSS.This issue affects Opencart Product in WP: from n/a through = 1.0.1...

CVE-2025-22338 WordPress WP-tagMaker plugin <= 0.2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lichwang WP-tagMaker tagmaker allows Reflected XSS.This issue affects WP-tagMaker: from n/a through = 0.2.2...

WordPress LucidLMS plugin <= 1.0.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin LucidLMS versions = 1.0.5...

CVE-2025-22358

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Simone Marcon Wp advertising management advertising-management allows Reflected XSS.This issue affects Wp advertising management: from n/a through = 1.0.3...

CVE-2025-22357

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdever Target Notifications target-notifications allows Reflected XSS.This issue affects Target Notifications: from n/a through = 1.1.1...

CVE-2025-22359

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pjfc SyncFields syncfields allows Reflected XSS.This issue affects SyncFields: from n/a through = 2.1...

CVE-2025-22353

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bvads BVD Easy Gallery Manager bvd-easy-gallery-manager allows Reflected XSS.This issue affects BVD Easy Gallery Manager: from n/a through = 1.0.6...

CVE-2025-22355

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in asokaaso2 Kikx Simple Post Author Filter sa-post-author-filter allows Reflected XSS.This issue affects Kikx Simple Post Author Filter: from n/a through = 1.0...

CVE-2025-22326

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 5centsCDN 5centsCDN 5centscdn allows Reflected XSS.This issue affects 5centsCDN: from n/a through = 25.4.15...